Legal

Privacy
notice.

What personal data we collect when you enquire or book, why we need it, who else sees it and how to have it removed.

Last updated: 30 July 2026

Highlighted fields are placeholders — we fill them in once the legal entity, licence numbers and payment terms are confirmed. This document is a working draft and is not legal advice.

1. Who controls your data

The controller of personal data collected through thehostbali.com is legal entity name, PT …, NIB / business licence no., office at Jl. Pantai Berawa No. 88, Tibubeneng, Canggu, Badung, Bali 80361, Indonesia. Questions or requests: hello@thehostbali.com.

2. What we collect

When you contact us or book: name, email address, phone or WhatsApp number, the dates and villa you are interested in, the number of guests, and anything you choose to write to us. For a confirmed booking we may also need identity details required by Indonesian law for guest registration, and the payment details processed by our payment provider.

When you browse the site: standard technical data such as IP address, browser and pages visited. This site is served through Cloudflare, which processes request data to deliver pages and protect against abuse.

We do not sell personal data, and we do not use it to build advertising profiles.

3. Why we use it

To answer your enquiry and prepare a quote; to make and manage a booking; to meet legal duties such as guest registration, tax and accounting; and to keep the site secure. Where we send you a message about a stay you asked about, we do so to perform the agreement between us or on the basis of your request.

Marketing messages are sent only if you ask for them, and every message includes a way to stop them.

4. Who else sees it

Only those who need it to deliver your stay: our own team; the villa staff assigned to your booking; our property management system e.g. Guesty; our payment provider e.g. GuestyPay / Stripe; and the booking platform you used, if you booked through Airbnb, Booking.com or similar.

Some of these providers process data outside Indonesia. Where that happens we rely on their contractual data-protection commitments.

5. How long we keep it

Enquiries that do not become bookings: e.g. 12 months. Booking and payment records: as long as Indonesian tax and accounting law requires, currently e.g. 10 years. After that we delete or anonymise the data.

6. Your rights

You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it where we are not required to keep it, and object to messages you did not ask for. Write to hello@thehostbali.com and we will answer within 30 days.

7. Cookies

This site uses cookies and similar storage that are necessary for it to work, and analytics — name the tool if used, e.g. Google Analytics. We do not run advertising cookies. You can block cookies in your browser; parts of the site may then behave differently.

8. Changes

If we change this notice we update the date at the top of the page. Material changes affecting existing bookings will be sent to you by email.

Questions about this document: hello@thehostbali.com or +62 812 3908 1021.
Chat